Steps to use kyber768 KEM in code

[ranjankumar23]

I want to know steps to use kyber768 KEM in SSL communication.

I already have a code which is doing SSL communication using openssl APIs like SSL_new, SSL_connect, SSL_accept etc.
I compiled quantum safe oqs and quantum safe openssl.

1. Now to use kyber768 KEM i only have to add this KEM algo using this API SSL_CTX_set1_groups_list?
2. Or i have to call any other API like this?
   testresult &= (ctx = EVP_PKEY_CTX_new_from_name(libctx, kemalg_name, NULL)) != NULL && EVP_PKEY_keygen_init(ctx) && EVP_PKEY_generate(ctx, &key);

[dstebila]

Are you using OQS-OpenSSL 1.1.1 or the OQS Provider with OpenSSL 3? This question would be better asked in the appropriate repository.

[ranjankumar23]

Thank you @dstebila and @baentsch. In my application I am not getting client and server hello handsake packets and also it is showing TLS2 Application.....as description of packets. I will share network capture. But do you see any problem with my application?

Also I want to print kem.c under kyber768 case. But I don't see my prints even when running s_client.

[ranjankumar23]

1. TLS1.2 issue mentioned above is my application issue.
2. I need your help into how I can see kem.c logs/prints.

[ranjankumar23]

I am able to see key exchange mechanism is using kyber768 in my application.
I have one question there---------Why TLS version is 1.2 inside but outside it is TLS1.3 as shown in attachment?

[dstebila]

The TLS 1.3 spec (RFC 8446, page 28) works this way.

[ranjankumar23]

Thank you @dstebila . We can close this thread.